Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2024-0641: Linux kernel TIPC deadlock can crash system
CVE-2024-0641 · published 2 years ago
Summary
The TIPC component in the Linux kernel can become stuck when a local user runs a specific operation, causing the whole system to stop responding. This affects several Canonical Linux images, including the GCP, GKE, GKEOP, and HWE versions. Install the latest kernel updates from Canonical to resolve the issue.
What to do
- Update canonical linux-aws-5.15 to version 5.15.0-1053.58~20.04.1.
- Update canonical linux-azure-5.15 to version 5.15.0-1056.64~20.04.1.
- Update canonical linux-gcp-5.15 to version 5.15.0-1051.59~20.04.1.
- Update canonical linux-gkeop-5.15 to version 5.15.0-1036.42~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-94.104~20.04.1.
- Update canonical linux-ibm-5.15 to version 5.15.0-1046.49~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1048.54~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-94.104~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1022.22~20.04.1.
- Update canonical linux-oracle-5.15 to version 5.15.0-1051.57~20.04.1.
- Update canonical linux-riscv-5.15 to version 5.15.0-1049.53~20.04.2.
- Update canonical linux to version 5.15.0-94.104.
- Update canonical linux-aws to version 5.15.0-1053.58.
- Update canonical linux-azure to version 5.15.0-1056.64.
- Update canonical linux-azure-fde to version 5.15.0-1056.64.1.
- Update canonical linux-gcp to version 5.15.0-1051.59.
- Update canonical linux-gke to version 5.15.0-1050.55.
- Update canonical linux-gkeop to version 5.15.0-1036.42.
- Update canonical linux-hwe-6.5 to version 6.5.0-17.17~22.04.1.
- Update canonical linux-ibm to version 5.15.0-1046.49.
- Update canonical linux-intel-iotg to version 5.15.0-1047.53.
- Update canonical linux-kvm to version 5.15.0-1050.55.
- Update canonical linux-lowlatency to version 5.15.0-94.104.
- Update canonical linux-lowlatency-hwe-6.5 to version 6.5.0-17.17.1.1.1~22.04.1.
- Update canonical linux-nvidia to version 5.15.0-1044.44.
- Update canonical linux-nvidia-6.5 to version 6.5.0-1014.14.
- Update canonical linux-nvidia-tegra to version 5.15.0-1022.22.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1009.9.
- Update canonical linux-oem-6.5 to version 6.5.0-1014.15.
- Update canonical linux-oracle to version 5.15.0-1051.57.
- Update canonical linux-raspi to version 5.15.0-1046.49.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1027.31.
- Update canonical linux-bluefield to version 5.15.0-1035.37.
- Update canonical linux-aws-fips to version 5.15.0-1053.58+fips1.
- Update canonical linux-fips to version 5.15.0-94.104+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1055.63+fips2.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1046.48.
- Update canonical linux-realtime to version 5.15.0-1054.60.
- Update canonical linux-raspi to version 6.7.0-1001.1.
- Update debian linux to version 6.1.64-1.
- Update debian linux to version 6.5.8-1.
- Update linux linux_kernel to version 6.6 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1053.58~20.04.1 Fix: upgrade to 5.15.0-1053.58~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1056.64~20.04.1 Fix: upgrade to 5.15.0-1056.64~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1051.59~20.04.1 Fix: upgrade to 5.15.0-1051.59~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 |
< 5.15.0-1036.42~20.04.1 Fix: upgrade to 5.15.0-1036.42~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-94.104~20.04.1 Fix: upgrade to 5.15.0-94.104~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1046.49~20.04.1 Fix: upgrade to 5.15.0-1046.49~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1048.54~20.04.1 Fix: upgrade to 5.15.0-1048.54~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-94.104~20.04.1 Fix: upgrade to 5.15.0-94.104~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1022.22~20.04.1 Fix: upgrade to 5.15.0-1022.22~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1051.57~20.04.1 Fix: upgrade to 5.15.0-1051.57~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1049.53~20.04.2 Fix: upgrade to 5.15.0-1049.53~20.04.2
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
Showing 50 of 118. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-94.104 Fix: upgrade to 5.15.0-94.104
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1053.58 Fix: upgrade to 5.15.0-1053.58
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1056.64 Fix: upgrade to 5.15.0-1056.64
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1056.64.1 Fix: upgrade to 5.15.0-1056.64.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1051.59 Fix: upgrade to 5.15.0-1051.59
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1050.55 Fix: upgrade to 5.15.0-1050.55
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1036.42 Fix: upgrade to 5.15.0-1036.42
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 |
< 6.5.0-17.17~22.04.1 Fix: upgrade to 6.5.0-17.17~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1046.49 Fix: upgrade to 5.15.0-1046.49
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1047.53 Fix: upgrade to 5.15.0-1047.53
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1050.55 Fix: upgrade to 5.15.0-1050.55
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-94.104 Fix: upgrade to 5.15.0-94.104
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 |
< 6.5.0-17.17.1.1.1~22.04.1 Fix: upgrade to 6.5.0-17.17.1.1.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1044.44 Fix: upgrade to 5.15.0-1044.44
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 |
< 6.5.0-1014.14 Fix: upgrade to 6.5.0-1014.14
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1022.22 Fix: upgrade to 5.15.0-1022.22
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1009.9 Fix: upgrade to 5.15.0-1009.9
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 |
< 6.5.0-1014.15 Fix: upgrade to 6.5.0-1014.15
|
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1051.57 Fix: upgrade to 5.15.0-1051.57
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1046.49 Fix: upgrade to 5.15.0-1046.49
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1027.31 Fix: upgrade to 5.15.0-1027.31
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1035.37 Fix: upgrade to 5.15.0-1035.37
|
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1053.58+fips1 Fix: upgrade to 5.15.0-1053.58+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-94.104+fips1 Fix: upgrade to 5.15.0-94.104+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1055.63+fips2 Fix: upgrade to 5.15.0-1055.63+fips2
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1046.48 Fix: upgrade to 5.15.0-1046.48
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1054.60 Fix: upgrade to 5.15.0-1054.60
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.7.0-1001.1 Fix: upgrade to 6.7.0-1001.1
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Debian:12 | debian | linux |
< 6.1.64-1 Fix: upgrade to 6.1.64-1
|
| Debian:13 | debian | linux |
< 6.5.8-1 Fix: upgrade to 6.5.8-1
|
| – | linux | linux_kernel |
< 6.6 6.6 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| – | redhat | enterprise_linux |
8.0 9.0 cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* |
Original advisory text
Kernel: deadlock leading to denial of service in tipc_crypto_key_revoke
A denial of service vulnerability was found in tipc_crypto_key_revoke in net/tipc/crypto.c in the Linux kernel’s TIPC subsystem. This flaw allows guests with local user privileges to trigger a deadlock and potentially crash the system.
References
- https://ubuntu.com/security/CVE-2024-0641 Third Party Advisory
- https://git.kernel.org/linus/08e50cf071847323414df0835109b6f3560d44f5 Third Party Advisory
- https://ubuntu.com/security/notices/USN-6624-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6626-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6628-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6626-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6628-2 Vendor Advisory
- https://security-tracker.debian.org/tracker/CVE-2024-0641 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6652-1 Vendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-0641 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-0641 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2258757 Third Party Advisory
- https://github.com/torvalds/linux/commit/08e50cf071847323414df0835109b6f3560d44f... Patch
- https://access.redhat.com/downloads/content/package-browser/ URL
- https://git.kernel.org/pub/scm/linux/kernel URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/0xxx/CVE-2024-0641.j... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-0641 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6626-3 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-833Deadlock
CWE-667Improper Locking
Timeline
Published17 Jan 2024
Updated2 Nov 2026
First seen9 Sep 2026
Sources
UBUNTU-CVE-2024-0641 · OSV
CVE-2024-0641 · NVD
DEBIAN-CVE-2024-0641 · OSV
CVE-2024-0641 · OSV
Track software like this
Free during beta